CVEvulnerability
CVE-2000-1207
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2000-09-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in glibc and allows the programs to be exploited via format string vulnerabilities in glibc via the LANG or LC_ALL environment variables (CVE-2000-0844).
Affected configurations
• redhat linux
References
- http://marc.info/?l=bugtraq&m=97034397026473&w=2 marc.info
- http://marc.info/?l=bugtraq&m=97063854808796&w=2 marc.info
- http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-059.php3 Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2000-075.html Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=97034397026473&w=2 marc.info
- http://marc.info/?l=bugtraq&m=97063854808796&w=2 marc.info
- http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-059.php3 Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2000-075.html Patch, Vendor Advisory